On Monday 04 October 2004 19:28, Björn Scorey wrote:
Hi Everyone !
I am running Suse 9.0 and I have installed
qmail (netqmail Ver. 1.05) amavis (amavis-new Ver. 20030616p5-23) antivir (Ver 2.08-16)
Antivir seems to be an evaluation version. (The one that came with Suse 9.0)
I donwloaded the EICAR E-Mail Test Virus but when I send either an infected attachment or simply copy the virus string on the mail, the antivirus doesn't recognize the virus, and the mail passes normally.
However when I run antivir on the infected file (attachment) by itself, it recognizes the virus. The same occured with f-prot (however I got some minor errors while installing f-prot). When I run either anti-virus scanner on my mailbox (mbox), none of them manage to see the virus.
Anyone has an idea what's wrong ?
Regards Björn
I don't know how patched or unpached is the netqmail version, but you need the qmailqueue.patch applied to qmail and the install the qmail-scanner so the mail are first being scanned and then passed to smtpd. You might also consider patching qmailqueue with qms-analog patch to activate reporting functions. after installing qmailscanner, you'll have to tell qmail to use the qmailscanner by editing /var/qmail/supervise/qmail-smtpd/run and add this to the SMTP "run" script right under the first line (#!/bin/sh): QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl" export QMAILQUEUE and change the softlimit to 40000000. For more info check the manuals for antivir and amavis on how to integrate them with qmail Josephine